This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json) Hash identifier: mczQ319UncCe9lvBasAoen7WdT9gx8iA9fo7XoUsc0U= Subject key identifier: 25:E6:05:72:EE:A3:40:B0:7F:1B:54:E9:DD:23:8F:A9:D1:BA:C3:87 Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Certificate serial: 019B5F77AE511FC26D343CB28EDE23DC71AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft Manifest number: 14B3 Signing time: Sat 27 Dec 2025 11:00:37 +0000 Manifest this update: Sat 27 Dec 2025 11:00:37 +0000 Manifest next update: Sun 28 Dec 2025 11:00:37 +0000 Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=) 2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: 5zPVDkTZew1B3q/jS2P3rZEsQnmS34Ba19EN12tLA4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:77:ae:51:1f:c2:6d:34:3c:b2:8e:de:23:dc:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Validity Not Before: Dec 27 11:00:37 2025 GMT Not After : Dec 28 11:00:37 2025 GMT Subject: CN=25e60572eea340b07f1b54e9dd238fa9d1bac387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:2a:de:91:4d:9f:21:8e:de:63:d3:cb:ec: 5a:6c:ff:d7:5c:6c:d1:62:5a:d5:87:e5:cf:29:f1: f7:d4:92:68:03:b8:6b:a7:4d:20:bb:db:86:f6:9f: 3f:d4:c3:41:3d:26:34:c5:7e:6f:39:a2:8f:76:9e: c7:2e:50:ac:e5:27:ac:52:99:4c:3b:4b:c6:83:a0: 18:8d:7b:3b:fa:e4:63:07:49:26:26:4f:99:90:87: 93:de:ae:5f:8a:e6:9c:63:78:64:9f:fa:98:48:ab: 26:91:df:dc:8a:37:ff:7c:4a:c2:5c:0d:ab:1f:13: 7c:a0:09:34:1a:cf:dc:25:25:e4:36:24:e6:cb:7f: 41:d9:29:d2:e2:81:ed:cf:ab:f9:3f:e5:6f:17:00: 02:f3:ab:b3:00:32:51:ca:b7:bd:27:77:bd:8c:96: b3:1e:9e:60:26:f1:83:bd:ef:f5:56:f0:83:5a:01: 9f:47:de:e3:e0:a5:d4:b0:3a:6c:26:d1:91:f2:dc: 00:c4:03:6a:b6:d2:3c:b9:50:1f:3a:f6:c3:e0:c8: a9:4e:6e:7f:e0:54:13:09:88:13:4b:89:59:d7:60: 2f:09:97:4d:6d:26:bb:37:2e:a8:9b:cb:11:41:d0: e5:b7:25:40:d2:5f:2d:2d:1c:7c:60:f0:58:0b:90: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E6:05:72:EE:A3:40:B0:7F:1B:54:E9:DD:23:8F:A9:D1:BA:C3:87 X509v3 Authority Key Identifier: keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2e:80:fb:c7:1f:83:96:92:8d:21:9f:57:0f:4f:33:fd:95: 18:da:ac:51:06:33:35:aa:3f:9d:e6:34:82:93:db:c1:3b:52: 00:61:1c:b0:e2:94:c4:d5:24:b1:d6:2b:a6:0e:44:aa:b0:14: e3:a6:83:5f:51:0e:fb:fe:38:76:4f:1c:75:b5:fe:e6:e5:de: 1a:9e:0f:9b:65:dd:7b:98:ec:30:1e:19:a1:bf:b1:1b:b8:7d: c7:0b:e3:cf:1f:3f:98:11:d7:48:b8:66:8c:3c:ba:03:7e:23: 12:07:e9:ea:66:d1:2a:34:3b:d5:8b:6c:7d:0b:52:b1:95:8b: 7f:58:90:c1:28:22:ec:84:20:da:28:a4:3d:f8:b2:e7:97:9a: 93:b1:f0:a9:0d:ab:66:f4:50:0a:9b:b0:b5:53:5c:76:79:3b: b9:1a:da:3f:5c:b5:aa:8f:1f:0d:d6:28:b8:e4:5a:7f:b9:c7: 98:c9:c9:4b:3a:22:c4:9b:bb:0a:7e:f6:3d:66:6c:14:d5:bd: 7b:56:01:07:70:54:e6:9f:20:4b:dd:f9:fe:aa:f6:93:53:e3: 75:8e:a5:b7:65:78:5e:e4:4b:94:83:e6:bb:01:36:8a:a4:90: eb:be:d1:e3:77:32:a1:05:46:fc:99:c4:8a:a8:06:78:ab:05: e7:20:5b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfd65RH8JtNDyyjt4j3HGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx YzY5N2YwHhcNMjUxMjI3MTEwMDM3WhcNMjUxMjI4MTEwMDM3WjAzMTEwLwYDVQQD EygyNWU2MDU3MmVlYTM0MGIwN2YxYjU0ZTlkZDIzOGZhOWQxYmFjMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xIq3pFNnyGO3mPTy+xabP/XXGzR YlrVh+XPKfH31JJoA7hrp00gu9uG9p8/1MNBPSY0xX5vOaKPdp7HLlCs5SesUplM O0vGg6AYjXs7+uRjB0kmJk+ZkIeT3q5fiuacY3hkn/qYSKsmkd/cijf/fErCXA2r HxN8oAk0Gs/cJSXkNiTmy39B2SnS4oHtz6v5P+VvFwAC86uzADJRyre9J3e9jJaz Hp5gJvGDve/1VvCDWgGfR97j4KXUsDpsJtGR8twAxANqttI8uVAfOvbD4MipTm5/ 4FQTCYgTS4lZ12AvCZdNbSa7Ny6om8sRQdDltyVA0l8tLRx8YPBYC5CZEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXmBXLuo0CwfxtU6d0jj6nRusOHMB8GA1UdIwQY MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS6A+8cf g5aSjSGfVw9PM/2VGNqsUQYzNao/neY0gpPbwTtSAGEcsOKUxNUksdYrpg5EqrAU 46aDX1EO+/44dk8cdbX+5uXeGp4Pm2Xde5jsMB4Zob+xG7h9xwvjzx8/mBHXSLhm jDy6A34jEgfp6mbRKjQ71YtsfQtSsZWLf1iQwSgi7IQg2iikPfiy55eak7HwqQ2r ZvRQCpuwtVNcdnk7uRraP1y1qo8fDdYouORaf7nHmMnJSzoixJu7Cn72PWZsFNW9 e1YBB3BU5p8gS935/qr2k1PjdY6lt2V4XuRLlIPmuwE2iqSQ677R43cyoQVG/JnE iqgGeKsF5yBbXg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:47:48 2025 by rpki-client